Category Security

July 18, 2023THNMoreMalware/Cyberattack An unidentified attacker compromised applications used by several Pakistani organizations and delivered ShadowPad, the successor to the PlugX backdoor commonly associated with Chinese hacking groups. According to Trend Micro, targets included Pakistani government agencies, public sector banks,…

Identity and Access Management Solution Provider jump cloud revealed on July 12, 2023 that it was the target of a security breach caused by a sophisticated state-sponsored attacker. The compromise was first revealed on June 27 when anomalous activity was…

July 18, 2023THNMorePrivacy / Malware Data related to some of VirusTotal’s registered customers, such as names and email addresses, was leaked after an employee accidentally uploaded the information to a malware scanning platform. The security incident, which consists of a…

A suspected scammer who used scareware to trick hundreds of thousands of victims around the world into handing over their money has been arrested by Spanish police. The anonymous Ukrainian was arrested at Barcelona’s El Prat airport after more than…

July 18, 2023THNMoreRansomware/Cyber ​​Threat A financially motivated actor known as FIN8 has been observed using an “improved” version of the backdoor. ironic Delivers BlackCat ransomware. According to the Symantec Threat Hunter Team, part of Broadcom, the development is an attempt…

Security researchers have documented over one million attempts to compromise the popular WordPress plugin over the past few days. Wordfence said the attacks began on July 14th and continued over the weekend, reaching 1.3 million attacks against 157,000 sites on…

July 18, 2023THNMoreServer security/vulnerability Threat actors are actively exploiting a recently disclosed critical security flaw in the WooCommerce Payments WordPress plugin as part of a larger targeted campaign. This flaw, tracked as CVE-2023-28121 (CVSS score: 9.8), allows an unauthenticated attacker…

July 18, 2023THNMoreCyber ​​Crime / Data Breach Conor Brian Fitzpatrickowner of the now-defunct website BreachForums, pleaded guilty to charges related to operating a cybercrime forum and possessing child pornographic images. The development, first reported by DataBreaches.net last week, comes almost…

July 18, 2023THNMoreData Security/Cyberattack Just over a week after JumpCloud reset API keys for customers affected by the security incident, the company said the intrusion was the work of a sophisticated state-of-the-art attacker. JumpCloud’s chief information security officer (CISO), Bob…

The Acting U.S. National Cyber ​​Secretary reportedly withdrew his name to consider a permanent role after being told concerns about personal debt. Kemba Walden impressed many in government last week with his highly acclaimed National Cybersecurity Strategy and Implementation Plan.…